CVE-2018-1000087

Name: CVE-2018-1000087
Creator: NVD / NIST
Published: 2018-03-13T15:29:01.237+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.66%

Last modified Jun 17, 2026

CVE-2018-1000087 is a vulnerability of currently unknown severity. WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . EPSS estimates a 0.66% chance of exploitation in the next 30 days.

Description

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker can execute the JavaScript into the "Create New File" and "Create New Directory" input box from 'files'.

Metrics

EPSS Probability

0.66%

46.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Wolfcms	Wolf Cms	0.8.3.1

References

https://cveexploit.blogspot.in/Exploit, Third Party Advisory
https://github.com/wolfcms/wolfcms/issues/666Exploit, Issue Tracking, Third Party Advisory
https://cveexploit.blogspot.in/Exploit, Third Party Advisory
https://github.com/wolfcms/wolfcms/issues/666Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Mar 13, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-1000087?

How severe is CVE-2018-1000087?

Severity scoring for CVE-2018-1000087 is pending analysis. The EPSS model estimates a 0.66% probability of exploitation in the next 30 days.

How do I fix CVE-2018-1000087?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-1000087?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST